On the 14th of June 2019 (one year later than expected) Portugal
finally approved Draft Law no. 120/XIII/3.ª (GOV),
implementing the (EU) Regulation 2016/679 (General Data Protection
Regulation or GDPR) in Portugal.
The Draft Law shall enter into force on the day following that
of its publication in the Portuguese Official Journal, which is
dependent of previous ratification by the President of the Republic
of Portugal.
Throughout the preparation and approval process of the Draft
Law, several concerns were raised, namely by the Portuguese
supervisory authority, the Data Protection Authority
(Comissão Nacional de Proteção de Dados -
CNPD), which, rather strangely, was not actively involved on the
drafting of the Law.
